Cyber Centre is aware of a campaign that is currently compromising several versions of Microsoft SharePoint Server in order to deploy the China Chopper web shell. Trusted researchers have identified compromised systems belonging to the academic, utility, heavy industry, manufacturing and technology sectors. Microsoft released security updates addressing this vulnerability in February and March 2019; however, many systems remain outdated. The Canadian Centre for Cyber Security is available to provide additional assistance regarding the content of this Alert to recipients as requested. The Cyber Centre operates as part of the Communications Security Establishment.”]
Source: https://cyber.gc.ca/en/alerts/china-chopper-malware-affecting-sharepoint-servers